Help with subinacl Denied

[Carito]

Hello. Ive been trying to get this working in order prevent the users from
using the usb mass storage driver. Trying to do it as user logon script, not
computer.

Actually everything works fine when an admin logs in. The logon script runs,
the bat file calls the regedit and everything is great. When a user account
logs on though, I get the following:
"Unable to set sesecurityprivilege: this privledge may be required. Access
is denied" and the reg import doesnt occur.

setup as:
% ~dp0subinacl.exe /verbose=1 /keyreg
"hkey_local_machine\system\currentcontrolset\services\usbstor" /grant=users=f

regedit.exe
"\\domainname\SysVol\domainname\Policies\{875C244C-A130-4D3F-87E4-5DD8EAF22651}\User\Scripts\Logon" usbstop.reg



What am I missing here? Whenever any account other than an admin tries you
get the sesecurityprilege error. I tried changing also to grant=everyone=f ,
and also sgrant.

Thanks,
Carito

 

[Allan]

Hello. Ive been trying to get this working in order prevent the users from
using the usb mass storage driver. Trying to do it as user logon script,
not
computer.

Why does it matter; what are you trying to accomplish here? Maybe there is
another solution or workaround that is effective.